AlmaLinux OS 9 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-269352 | SRG-OS-000095-GPOS-00049 | ALMA-09-030820 | SV-269352r1134829_rule | 2025-11-25 | 1 |
| Description |
|---|
| The EPEL is a repository of high-quality open-source packages for enterprise-class Linux distributions such as RHEL, CentOS, AlmaLinux, Rocky Linux, and Oracle Linux. These packages are not part of the official distribution but are built using the same Fedora build system to ensure compatibility and maintain quality standards. |
| ℹ️ Check |
|---|
| Verify that AlmaLinux OS 9 is not able to install packages from the EPEL with the following command: $ dnf repolist repo id repo name appstream AlmaLinux 9 - AppStream baseos AlmaLinux 9 - BaseOS extras AlmaLinux 9 - Extras If any repositories containing the word "epel" in the name exist, this is a finding. |
| ✔️ Fix |
|---|
| The repo package can be manually removed with the following command: $ sudo dnf remove epel-release Configure AlmaLinux 9 to disable use of the EPEL repository with the following command: $ sudo dnf config-manager --set-disabled epel |